Privacy policy

This page explains what data may be processed when you use the mondai. studio website, book a call, or contact me by email.

Data controller

The data controller is CJ Nguyen Van, operating under the mondai. studio brand as an unregistered activity under Polish law.

Contact for privacy matters: cj@mondaistudio.com

Place of operation: Wroclaw, Poland / online. Address details needed for a specific contract can be provided during the contracting process if required.

No data protection officer has been appointed. At this scale, that is not required.

What data may be processed

I may process data that you provide voluntarily or that is needed for the website to work:

• your name or company name,
• email address,
• phone number, if you choose a phone call or provide it optionally,
• call date, call topic, and message content,
• data needed to prepare, deliver, and settle a project,
• basic technical data, such as IP address, browser information, security logs, and anti-spam data.

Purpose and legal basis

Data may be processed:

• to respond to a message, book a call, and prepare a proposal - GDPR Article 6(1)(b),
• to deliver an agreed service - GDPR Article 6(1)(b),
• to meet legal, tax, or accounting obligations, if they arise - GDPR Article 6(1)(c),
• to protect the website, form, and communication against abuse - GDPR Article 6(1)(f),
• to document arrangements, bring claims, or defend against claims - GDPR Article 6(1)(f),
• based on consent, if a newsletter, marketing, or another consent-based tool is added later - GDPR Article 6(1)(a).

The legitimate interest is secure website operation, efficient communication, work organization, and protection against abuse.

Is providing data required

Providing data is voluntary, but without some of it I cannot reply, book a call, prepare a proposal, or deliver a service.

In the booking form, the required data is the data needed to contact you and confirm the slot. A phone number is required only when you choose a phone call.

Who may receive the data

Data is processed with tools needed to run the website and communicate:

• Netlify - website hosting,
• Google Workspace - email, calendar, Google Meet, and booking confirmations,
• Cloudflare Turnstile - bot protection on the booking form,
• Fontshare - delivery of the Switzer typeface,
• project-management tools, if needed for the work,
• accounting, legal advisers, or public authorities, if required.

I do not sell data to advertisers.

Transfers outside the EEA

Some tools may process data outside the European Economic Area, especially when they use global infrastructure. In that case, appropriate safeguards should apply, such as Standard Contractual Clauses or other mechanisms allowed by the GDPR.

How long data is kept

Data is kept for as long as needed to communicate, prepare a proposal, deliver the work, settle accounts, secure claims, or meet legal obligations.

Messages and project arrangements may be kept for the time needed to handle the matter and possible claims. Accounting data is kept for the period required by law.

Automated decisions and profiling

I do not make decisions about you solely by automated means. I do not use advertising profiling.

Your rights

You have the right to:

• access your data,
• correct your data,
• delete your data,
• restrict processing,
• object to processing,
• data portability, where applicable,
• withdraw consent, if processing is based on consent,
• lodge a complaint with a supervisory authority.

In Poland, the supervisory authority is the President of the Personal Data Protection Office: uodo.gov.pl.

Contact

For personal data matters, write to: cj@mondaistudio.com